Privacy notice

Last updated January 2026.

Who is responsible for your data

This site is operated by domcloud, established in Spain. We are the data controller for the personal data described here, under the EU General Data Protection Regulation and Spanish data protection law (LOPDGDD). [TO CONFIRM: before the contact form is switched on, add the registered entity name, tax number and registered address — GDPR Art. 13 requires the controller’s identity and contact details]

For anything in this notice, contact [email protected].

What we collect, and why

When you send an enquiry

The contact form collects your name, email address, and message, and optionally your company and phone number plus which service you’re asking about. We use this solely to reply to you and, if you become a client, to carry out the work.

Our lawful basis is legitimate interests — you contacted us asking for a reply, and responding is what you would expect. If you’d rather we deleted the enquiry after replying, just ask.

Technical information sent with your enquiry

We also record your browser’s user-agent string, the page that referred you, any campaign parameters in the link you followed, and a one-way salted hash of your IP address. We use these to prevent spam and abuse of the form.

We do not store your IP address itself. The hash cannot be reversed to recover it, and it is only ever compared against other hashes.

Analytics

We use analytics to understand which pages are useful. This only loads if you accept it in the cookie banner, and our lawful basis is your consent, which you can withdraw at any time from our cookie notice. Decline and no analytics scripts run at all.

How long we keep it

• Enquiries that don’t become work: [TO CONFIRM: retention period — 24 months is a reasonable default], then deleted.
• Client records: kept for the duration of the engagement and then for as long as we’re legally required to keep financial records.
• Analytics data: retained by our analytics provider per their settings.

Who else processes it

We keep this list short on purpose. We share personal data only with providers who help us operate the site and reply to you:

• Google Cloud — hosting and database, where enquiries are stored (region: [TO CONFIRM: hosting region, e.g. europe-west2]).
• Resend — sends us the notification email containing your enquiry.
• PostHog — analytics, only if you consent.
• Stripe — payments, if you become a client. Card details go directly to Stripe and never reach us; we see only the billing name, email and the outcome of the payment.

We do not sell your data, and we do not share it for advertising. [TO CONFIRM: confirm whether any provider processes data outside the EEA and, if so, the safeguard relied on — usually the EU Standard Contractual Clauses]

Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it’s wrong;
• delete it;
• restrict or object to how we use it;
• transfer it to someone else.

Email [email protected] and we’ll respond within one month. If you’re unhappy with how we’ve handled it you can complain to the Spanish Data Protection Agency (AEPD), though we’d rather you told us first so we can fix it.

Changes

If we change this notice we’ll update the date at the top. Material changes affecting existing clients will be emailed rather than quietly published.